# PPIO Agent Sandbox

Official pricing: https://ppio.com/docs/sandbox/pricing.md  
Category: agent-sandbox · Isolation: firecracker

## Pricing regimes (raw)

- **CPU + RAM allocation** (resource): $0.016094195306/vCPU-h, $0.008047097653/GiB-h

## Features

Yes: snapshots, memory snapshots, fork/clone, pause/resume, persistent disk, whole disk survives a stop, volumes, idle auto-stop, custom image (Docker or snapshot), start from your own snapshot, your own Docker/OCI image, full VM (own kernel), browser, desktop GUI, computer-use API, code interpreter, browser + desktop control, preinstalled agents, SSH, HTTPS preview URLs, egress allowlist, open internet, static egress IP, Python, Node.js, credential injection, wake on request, live fork (no pause), memory fork, MCP server, automatic snapshots, snapshots on demand, gVisor or VM (no shared kernel), inbound access rules, firewall inside (nftables), secret proxy, secret proxy for any API, extra volumes, shared volumes, FUSE mounts, kernel features (eBPF, mounts, cgroups)

No: ≥24 h sessions, Docker inside, nested virtualization, anti-bot stealth, CAPTCHA solving, residential IPs, public IPv4, raw TCP inbound, self-hosting, BYOC, open source, HIPAA, SSO, GPU, arm64, Windows, macOS, HTTP method/path egress rules, live resize, EU data residency, usage per sandbox (API), agent harness API, hosted agent API (their own agent)

Unknown: everything else. Evidence (source + quote) per feature: https://battleships.dev/data/providers/ppio-sandbox.json → feature_evidence

## Company

- Ownership: independent
- Stage: series-b [source](https://www.36kr.com/p/3848636043590528)
- Accelerators: none found
- Total raised: $69M (estimated: 'PPIO已累计完成5亿融资' (cumulative funding of ~RMB 500M) per 智源社区/BAAI hub, converted at ~7.25 CNY/USD. That figure is dated June 2025 (before the 2026 B-2 tranche), so the true cumulative total by the 2026-09-30 check date is higher — at minimum the disclosed B ($21M across two named backers, total round size undisclosed) plus the B-2 tranche ($35.2M) add on top of it.) [source](https://hub.baai.ac.cn/view/46822)
- Last round: series-b, $35.2M, 2026-06 (confirmed) [source](https://caifuhao.eastmoney.com/news/20260610153719586372760)
- Investors: Hong Kong Investment Corporation (香港投资管理有限公司, dubbed the 'Hong Kong version of Temasek'), Harvest Oriental, LCV Pathfinder, Millennium, IMO Ventures, CCV Fund / 创世伙伴创投, Lanchi Ventures (蓝驰创投), Huaye Tiancheng Capital (华业天成资本), Yuanwang Capital (远望资本), Panlin Capital (磐霖资本), Feidian Capital (沸点资本), Harvest Fund (嘉实基金), Wang Xiaochuan (王小川, Baichuan AI founder, ex-Sogou CEO, angel), Shen Yuanqing (申元庆, former Microsoft Azure China president, angel), Tang Binsen (唐彬森, Genki Forest founder, angel), Li Shanyou (李善友, Chaos University founder, angel), Cheng Hao (程浩, Xunlei co-founder, angel)
- Revenue: $106.9M (confirmed: RMB 770M for FY2025 per IPO prospectus as reported by press; converted at ~7.2 CNY/USD) [source](https://news.futunn.com/post/74440158/ppio-cloud-has-filed-its-ipo-prospectus-planning-to-list) annual revenue, 2025

PPIO is the product brand of 派欧云计算（上海）有限公司, founded 2018 by PPTV founder Yao Xin (姚欣) and ex-PPTV chief architect Wang Wenyu (王闻宇, ~10.17% stake). It is a VC-backed, VIE-structured independent company (not a subsidiary of a bigger corporate group); its Hong Kong IPO holding entity is PPLabs Technology Limited (派想未来集团/'派想未来'). It filed for a Hong Kong main-board IPO twice — first in June 2025 (lapsed) and again June 2026 — and is still loss-making (RMB 223M net loss / RMB 105M adjusted net loss in FY2025) though revenue grew from RMB 358M (2023) to RMB 770M (2025), driven by AI cloud/inference revenue (>10x YoY in 2025). Not to be confused with Novita (the card notes 'legal corporate relation to Novita remains unresolved' — no evidence found here that Novita is a corporate parent/subsidiary of PPIO; treat as a separate, unconfirmed question outside this funding research).

## Caveats

- Exact VAT inclusion unknown.
- Volume beta has no independently published rate.
- Engine cannot subtract account-wide 60 GiB snapshot allowance; apply manually.
- Legal corporate relation to Novita remains unresolved.
- Default lifetime is five minutes; explicit timeout/update needed for eight-hour work. Maximum accepted timeout not established in current docs.
- Unknowns remain null, not free; generic infrastructure modes are opt-in alt.
- Worked example assumes resources are released between active windows unless a retained-instance scenario is explicitly discussed.
- VAT basis: Unknown: reviewed pricing source does not explicitly establish VAT/tax inclusion.
- Residency: cn-shanghai-1 v1 and cn-beijing-1 v2. Do not inherit Novita US regions. Volumes/secrets/new snapshots need v2.
- SSH (verified 2026-09-28, docs/sandbox/sandbox-ssh-access.md): real OpenSSH server in a custom template, tunnelled over WSS through an exposed sandbox port (websocat ProxyCommand); needs template setup, no direct port 22. ssh = true.
- Egress (re-checked 2026-09-28): pricing.md and sandbox-internet-access.md publish no traffic/egress charge; egress_gib stays null (unknown, not free).
- Disk (re-checked 2026-09-28): every sandbox gets a fixed 20 GB local disk, free ('本地存储免费'); no option to enlarge it or price for extra local disk is documented. Persistent storage has 60 GB free per account then ¥0.0005/GB-h (the snapshot rate). Workloads needing >20 GiB local disk must mount S3 (sandbox-mount-cloudstorage.md) or volumes (beta, unpriced).
- Persistent storage (templates, snapshots, paused sandboxes) is billed per day (按天计费) at CNY 0.0005/GB-h above a 60 GB per-account free allowance; paused sandboxes are kept indefinitely until killed, so storage accrues. Pausing takes ~4 s per GB RAM (billing of that window not stated).
- Regions: cn-shanghai-1 (v1, default, sandbox.ppio.cn) and cn-beijing-1 (v2, added 2026-09-07; Snapshot, Secret, Volume only here). No international sandbox site: ppinfra.com redirects to ppio.com; ppio.ai/ppio.io are parked landers. International sibling = Novita (separate card).

## How this provider charges


As of 2026-09-28. Price basis: public list/reference unless labeled historical, illustrative, promo or unpriced.

PPIO is separately priced from Novita: CNY domestic API, Shanghai v1 and Beijing v2 endpoints. Novita first-party gym repository mentions PPIO templates, suggesting shared engineering, not sufficient proof of legal ownership or identical tariff. Keep distinct IDs. Storage allowance is shared 60 GB/account across templates, snapshots and paused sandboxes.

## Currency, VAT and residency
- Native catalog: CNY. FX: 1 CNY = 0.149020326907 USD, ECB 2026-09-28 ([source](https://www.ecb.europa.eu/stats/policy_and_exchange_rates/euro_reference_exchange_rates/html/index.cs.html)). USD-listed catalogs remain independent quotes.
- Tax: Unknown: reviewed pricing source does not explicitly establish VAT/tax inclusion.
- Residency/restrictions: cn-shanghai-1 v1 and cn-beijing-1 v2. Do not inherit Novita US regions. Volumes/secrets/new snapshots need v2.

## Regimes
| Regime | When it applies | How billed | Native / USD numbers | Source |
|---|---|---|---|---|
| on-demand | CPU + RAM allocation | allocated wall time; 1 second increment | CNY 0.108/vCPU-h + 0.054/GiB-h → USD 0.016094195306 + 0.008047097653; null means unknown | https://ppio.com/docs/sandbox/pricing.md |
| idle-standby | Paused sandbox | See rule | CPU/RAM zero; state persisted; first 60 GB/account free, then CNY .0005/GB-h. | https://ppio.com/docs/sandbox/pricing.md |
| enterprise | Higher concurrency/custom quota | See rule | Sales-assessed; no published discount. | https://ppio.com/docs/sandbox/pricing.md |

## Gotchas
- Exact VAT inclusion unknown.
- Volume beta has no independently published rate.
- Engine cannot subtract account-wide 60 GiB snapshot allowance; apply manually.
- Legal corporate relation to Novita remains unresolved.
- Default lifetime is five minutes; explicit timeout/update needed for eight-hour work. Maximum accepted timeout not established in current docs.
- Unknowns remain null, not free; generic infrastructure modes are opt-in alt.
- Worked example assumes resources are released between active windows unless a retained-instance scenario is explicitly discussed.
- VAT basis: Unknown: reviewed pricing source does not explicitly establish VAT/tax inclusion.
- Residency: cn-shanghai-1 v1 and cn-beijing-1 v2. Do not inherit Novita US regions. Volumes/secrets/new snapshots need v2.

## Required worked example
4 vCPU / 8 GiB requested; 50 simultaneous workers × 8 hours/day × 22 days = **8,800 instance-hours**, 1,100 daily sessions. CPU utilization 30% does not reduce allocated-resource charges. Snapshot retention is **50 GiB total for 730 hours**, not 50 GiB per worker; egress is **100 GiB total**. Root disk size was not specified, so root/volume costs are not silently assigned zero.
- on-demand: USD 0.128753562/allocated hour × 8,800 = **USD 1133.03 compute** (before quotas, fees, free buckets, storage and tax).
- 50 GiB retained state: CNY 0 / USD 0 only if this is the entire account storage total and the shared 60 GB allowance is otherwise unused; excess CNY .0005/GB-hour.
- 100 GiB egress: **unknown**, not USD 0.
- Full all-in bill: **null** where any required storage/network/fee or eligibility fact is unresolved. Quota raises may be necessary for 200 aggregate vCPU / 400 GiB RAM.

## Sources
- https://ppio.com/docs/sandbox/pricing.md
- https://ppio.com/docs/sandbox/quota-limits.md
- https://ppio.com/docs/sandbox/overview.md
- https://ppio.com/docs/sandbox/e2b-compatible.md
- https://ppio.com/docs/sandbox/sandbox-auto-persistence.md
- https://ppio.com/docs/sandbox/volume-overview.md
- https://ppio.com/ai-computing/sandbox
- https://blog.ppio.com/untitled-20/
- https://github.com/novitalabs/novita-gym
- https://ppio.com/docs/sandbox/sandbox-timeout.md